Security Advisory

CVE-2020-15842

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-07-20 01:06:54

Last updated 2024-08-04 13:30:22

Assigner mitre

CVSS score 8.1

State PUBLISHED

Description

Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to execute arbitrary code via crafted serialized payloads, because of insecure deserialization.

← Browse all CVEs View on cve.org ↗